$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft File: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json) Hash identifier: CchkM1dGPrlfNIBfMi6wFK5KxP4bTbcKU9vJYH9JiYQ= Subject key identifier: F5:43:C3:54:68:07:03:74:56:FE:7C:CC:F7:37:30:33:45:DF:AC:FF Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft Manifest number: CE Signing time: Sat 19 Jul 2025 06:03:02 +0000 Manifest this update: Sat 19 Jul 2025 06:03:01 +0000 Manifest next update: Sat 26 Jul 2025 06:03:01 +0000 Files and hashes: 1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: oC2hbcL/72TqZjgxo6kK0/vasBpxwxLrslgKsrc7qdU=) 2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: 6g7DJTli/YH5hSeeCwQn1OlBs7GZnC1wNbHw8krPxSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Validity Not Before: Jul 19 06:03:01 2025 GMT Not After : Jul 26 06:03:01 2025 GMT Subject: CN=687b3515-6001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:b2:2d:d0:06:04:a5:61:ef:28:ba:b2:06: 29:8c:32:bf:3f:56:5b:c7:2c:77:d6:37:da:70:37: af:da:85:9b:cb:28:4c:14:f4:42:57:69:4f:f4:c5: 09:ed:d8:10:f1:a7:f5:93:a7:38:40:11:0e:3c:0a: d2:32:9b:ce:21:ca:11:5c:b1:b6:27:7a:8a:ac:c6: ca:74:5f:a6:ec:63:7e:01:a3:35:79:86:10:66:cb: 56:a2:7c:b1:ad:fe:1b:8c:da:01:4f:55:fc:1b:83: 5b:28:58:d8:d0:9a:ee:5f:ed:4d:27:b4:70:f4:84: 7f:37:11:4c:ee:58:21:67:99:f5:59:c0:fd:34:fb: a8:85:a5:f2:cb:42:12:90:0e:60:2d:ca:58:a9:4e: 13:a5:f6:b9:a6:47:78:50:73:24:09:14:1a:f2:85: 04:c7:4f:57:aa:f4:f7:1d:67:91:a8:c6:b2:90:51: 04:aa:b7:4a:ab:c1:70:27:e3:ec:62:aa:7d:dc:82: 7e:a0:e4:fd:80:06:de:b3:ca:ad:f2:d1:80:d2:eb: 15:56:b0:9c:17:33:9d:7d:08:2a:38:06:0f:20:23: 47:e7:84:b8:00:ab:6c:c1:31:c5:a9:46:70:1e:91: 52:20:74:09:0b:93:71:17:3d:be:75:55:03:ac:4c: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:43:C3:54:68:07:03:74:56:FE:7C:CC:F7:37:30:33:45:DF:AC:FF X509v3 Authority Key Identifier: keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:3a:92:af:84:ed:91:8d:a6:60:11:17:1a:63:26:26:04:07: a7:c0:16:fa:aa:a0:36:d9:a2:6c:5e:ea:7a:6c:c2:f7:97:c2: 3d:6e:db:ee:ea:ec:7b:5a:2c:25:0e:3c:45:ae:6e:86:10:d6: b1:b6:6d:6a:b9:e9:27:a1:32:fc:9c:0b:8a:a2:83:07:4b:8e: 42:48:a6:b7:de:2b:e5:df:c2:07:f8:bd:ca:40:b2:cc:18:61: 87:c5:b9:7f:ee:86:e4:46:d9:90:d9:ab:88:14:d3:2c:f0:1c: d1:10:ed:d7:9a:b2:2c:e4:60:08:5b:e3:eb:bc:63:3d:1d:f2: 54:8e:4f:c0:36:42:5c:9f:ee:dc:dd:4e:f7:7f:50:e6:34:5a: 61:35:f7:2e:2f:92:e6:12:7d:9e:cb:4a:57:b7:e3:1d:10:02: 6c:54:14:75:09:08:f6:5c:13:76:e1:64:34:5c:13:af:87:15: 56:b2:66:bc:3c:73:7b:e9:9b:87:86:94:39:f4:81:a2:a0:57: 2b:fe:f8:4b:69:ea:93:59:32:33:1d:09:93:a7:c1:4e:9e:00: 1f:be:9c:4a:a4:e9:8e:64:20:77:d9:de:fd:7d:24:4b:56:b4: 43:b7:dc:a6:1c:c9:ec:64:52:94:39:9c:8e:80:e0:9c:80:14: 9f:fd:a0:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEIzRUZBN0Q2QUUxOTlEMTQ1ODJERDRFQ0I5MTYzQTND OUQ4NDE3NTkwHhcNMjUwNzE5MDYwMzAxWhcNMjUwNzI2MDYwMzAxWjAYMRYwFAYD VQQDEw02ODdiMzUxNS02MDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE6yLdAGBKVh7yi6sgYpjDK/P1Zbxyx31jfacDev2oWbyyhMFPRCV2lP9MUJ 7dgQ8af1k6c4QBEOPArSMpvOIcoRXLG2J3qKrMbKdF+m7GN+AaM1eYYQZstWonyx rf4bjNoBT1X8G4NbKFjY0JruX+1NJ7Rw9IR/NxFM7lghZ5n1WcD9NPuohaXyy0IS kA5gLcpYqU4Tpfa5pkd4UHMkCRQa8oUEx09XqvT3HWeRqMaykFEEqrdKq8FwJ+Ps Yqp93IJ+oOT9gAbes8qt8tGA0usVVrCcFzOdfQgqOAYPICNH54S4AKtswTHFqUZw HpFSIHQJC5NxFz2+dVUDrEz8SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVDw1Ro BwN0Vv58zPc3MDNF36z/MB8GA1UdIwQYMBaAFLPvp9auGZ0UWC3U7LkWOjydhBdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83NEJCMjREMjNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5SUllMZFRzdVJZNlBKMkVG MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83NEJCMjREMjNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5S UllMZFRzdVJZNlBKMkVGMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdOpKvhO2RjaZgERcaYyYmBAenwBb6qqA22aJsXup6bML3l8I9btvu 6ux7WiwlDjxFrm6GENaxtm1queknoTL8nAuKooMHS45CSKa33ivl38IH+L3KQLLM GGGHxbl/7obkRtmQ2auIFNMs8BzREO3XmrIs5GAIW+PrvGM9HfJUjk/ANkJcn+7c 3U73f1DmNFphNfcuL5LmEn2ey0pXt+MdEAJsVBR1CQj2XBN24WQ0XBOvhxVWsma8 PHN76ZuHhpQ59IGioFcr/vhLaeqTWTIzHQmTp8FOngAfvpxKpOmOZCB32d79fSRL VrRDt9ymHMnsZFKUOZyOgOCcgBSf/aBt -----END CERTIFICATE-----Generated at Sun Jul 20 11:45:28 2025 by rpki-client